ZorgMail Safe Relay Setup - Microsoft 365

This article is a guide on how to set up Mimecast to work with ZorgMail if you are using Microsoft 365.

There are two ways to configure Mimecast for use with ZorgMail in combination with Microsoft 365:

• Use Microsoft 365 to filter on the rules and create an X-Header so Mimecast can be configured the same as when using an Exchange On-Premises environment
• Disable all rules in Microsoft 365 and build all the rules in Mimecast.

ZorgMail Rules in Microsoft 365

When ZorgMail is enabled in Microsoft 365, all emails are sent directly to ZorgMail using an Outbound connector. This connector is not needed when Mimecast is configured in front of Microsoft 365.
The Default ZorgMail rules are all configured to use the Outbound connector.
After the ZorgMail implementation is finished, the following needs to be adjusted when using Mimecast:

• Berichten Routeren Naar Ontvangers Met ZorgMail Secure Email (Domain based).

• ZorgMail Safe Relay – Onderwerp controle.

• ZorgMail Safe Relay – Mailheader controle.

All the above configurations are transport rules inside Microsoft 365. Every Transport rule is configured with the ZorgMail Outbound connector in the Doe het volgende option.  This is a custom script that the customer needs to adjust for their specific environment.

The option Doe het volgende needs to be changed from [Gebruik de volgende connector..] to [Berichteigenschappen wijzigen].

• Select the option [Berichteigenschappen wijzigen]

• Select  [Berichtkop Instellen]

• Create a [Berichtkop] “X-MS-Transport-Connect-To” with the value (waarde) “ZorgMail”

• Add the action and save the transport rule.

Repeat the above steps for all the transport rules that are created for ZorgMail in Microsoft 365.
When all the changes are done in Microsoft 365, the X-Header check needs to be configured in Mimecast.

Send messages based on X-Header

On the Mimecast Administration Console:

1. Navigate to Policies | Gateway Policies | Content Examination | Definition.

2. Select the [Zorgmail – Content Definitions folder].

3. Click on the New Content Definition button.

4. Set the fields below as follows:

Field / Option	Setting
Description	ZorgMail – X-Header Controle
Activation Score	1
Word/Phrase Match List	1 “X-MS-Transport-Connect-To: ZorgMail”
Scan Message Headers	Check the checkbox
Enable Inbound and Outbound Check	Check the checkbox
Delivery Route	ZorgMail – Outbound
Secure Delivery	ZorgMail – Secure Outbound

5. Click Save and Exit.

After creating the Definition for Content Examination, a Policy must be created to execute the definition.

1. Navigate to Policies | Gateway Policies | Content Examination

2. Click the New Policy button.

3. Set the fields below as follows:

Field / Option	Setting
Policy Narrative	ZorgMail – X-Header Controle
Select Content Definition	ZorgMail – X-Header Controle
Applies From	Internal Addresses
Applies To	External Addresses

4. Click Save and Exit.

The configuration within Mimecast for ZorgMail is ready to be used.

Disable the inbound and outbound connectors in Microsoft 365 for ZorgMail.

See Also...

• Email Security Cloud Gateway - Setup ZorgMail Safe Relay

• Email Security Cloud Gateway - Content Examination - ZorgMail

• Email Security Cloud Gateway - ZorgMail Safe Relay Setup - Exchange On-Premises